HIGHCIS 8.5

Ensure AKS cluster has Azure AD integration enabled

AKS clusters should use Azure AD for authentication and RBAC.

Security Impact

Without Azure AD, cluster access relies on certificate-based authentication only.

How to Remediate

Enable Azure AD integration when creating cluster or update existing cluster.

Affected Resources

Microsoft.ContainerService/managedClusters

Compliance Frameworks

CIS Azure v1.5.0SOC 2PCI-DSSNIST 800-53

How TigerGate Helps

TigerGate continuously monitors your Azure environment to detect and alert on this misconfiguration. Here's what our platform does for this specific check:

  • Continuous Scanning

    Automatically scans all Azure Kubernetes Service (AKS) resources across your Azure subscriptions every hour

  • Instant Alerts

    Get notified via Slack, email, or webhooks when this misconfiguration is detected

  • One-Click Remediation

    Fix this issue directly from the TigerGate dashboard with our guided remediation

  • Compliance Evidence

    Automatically collect audit evidence for CIS Azure v1.5.0, SOC 2, PCI-DSS compliance

  • Drift Detection

    Get alerted if this configuration drifts back to an insecure state after remediation

Check Details

Check ID
azure-aks-1
Service
Azure Kubernetes Service (AKS)
Category
Identity Management
Severity
HIGH
CIS Benchmark
8.5

Automate This Check

TigerGate automatically scans your Azure environment for this and 160+ other security checks.

Start Free Trial